CRIME & LAW

States Secure Limited Payments After 23andMe Data Breach

▪

Read, Watch or Listen

Media Bias Meter

Sources: 7

Center 100%

Sources: 7

Madison, Wis. state and multistate coalitions announced this week that they reached settlements with the bankruptcy trustee for 23andMe over an October 2023 data breach that exposed account and genetic information for about 6.9 million customers worldwide, including tens of thousands of residents in multiple states. Officials said immediate distributions from the bankruptcy estate are limited to $18 million despite $150 million in allowed state claims; individual state shares include roughly $275,000 for Wisconsin, near $160,000 for Delaware, and about $149,399 for South Dakota, while a separate $46.75 million class-action settlement aims to provide additional consumer relief and set claim deadlines.

Prepared by Emily Rhodes and reviewed by editorial team.

Timeline of Events

October 2023: 23andMe publicly disclosed a data breach impacting roughly 6.9 million customers.
Late 2023–early 2024: Subsets of exposed data appeared for sale on the dark web; states launched investigations.
2026: 23andMe filed for bankruptcy and a trustee evaluated and allowed $150 million in state claims.
2026: Bankruptcy trustee limited immediate recoveries to $18 million to distribute among states and claimants.
2026: States announced individual payouts and referenced a $46.75 million class-action settlement with a February 17, 2026 claim deadline.

Why This Matters to You

Your data privacy is at stake. If you're a 23andMe customer, your genetic and account information might have been exposed. It's crucial to monitor your accounts for suspicious activity. Check your credit report for any unusual changes.

The Bottom Line

States secured limited payments after a massive data breach at 23andMe. But the payouts are far less than the claims. A separate class-action settlement might provide more relief. Worth forwarding if you know someone who used 23andMe.